Homepage

org.lucee:lucee

Licenses: LGPL-2.1
Published: 11 years ago Last updated: 5 days ago Latest version: 7.0.5.41

License

LGPL-2.1[5.0.0.22,);
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the org.lucee:lucee package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • C
Expired Pointer Dereference

[5.0.0.2,)
  • C
XML External Entity (XXE) Injection

[,5.3.7.59)[5.3.8.132-RC,5.3.12.1)[5.4.0.65-RC,5.4.3.2)
  • C
Remote Code Execution (RCE)

[5.3.6.53-RC,5.3.6.68)[5.3.7.34-RC,5.3.7.47)[5.3.5.92,5.3.5.96)

Package versions

291 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
8.0.0.172-BETA13 Jul, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.126-BETA18 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.113-ALPHA15 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.74-ALPHA1 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.73-ALPHA1 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.72-ALPHA1 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.71-ALPHA1 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.70-ALPHA1 Jun, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.69-ALPHA30 May, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L
8.0.0.68-ALPHA29 May, 2026
  • 1
    C
  • 0
    H
  • 0
    M
  • 0
    L